IT 
ES 
Protecting an ATM today means much more than defending a single device against malware or unauthorised access. ATM networks are increasingly connected, distributed and integrated with banks’ systems. This means that security must protect the terminal throughout every stage of its lifecycle, from initial configuration and updates to maintenance and day-to-day management.
This is the direction in which Lookwise Device Manager (LDM), Auriga’s solution for the cybersecurity of ATMs and critical devices, is evolving. The platform is expanding the scope of its protection by adopting a multi-layered Zero Trust approach across the entire operating environment. This applies not only to software, but also to users, processes, hardware components, communications and activities, all of which must be authorised, verified and controlled.
From protecting individual ATMs to securing the entire process
Endpoint protection remains the starting point: controlling authorised applications, verifying file integrity, protecting hardware, encrypting disks, maintaining a centralised inventory and securely managing remote activities.
However, the evolution of LDM extends this control to everything happening around the ATM. The principle is simple: nothing is considered secure by default. Every access request, change or operation must be authorised, verified and controlled in advance.
For banks, this means gaining more comprehensive control not only over what happens on the hardware itself, but also over activities such as software distribution, updates, physical maintenance and administrative operations.
Protection extending to the most critical components
Security also reaches the deeper layers of the ATM. LDM enables BIOS and firmware to be managed and protected remotely, while configurations and credentials can be centrally controlled, simplifying activities that can become particularly complex across very large networks.
Software protection is also becoming more sophisticated. The platform is designed to counter techniques that attempt to exploit normally legitimate system tools to carry out unauthorised activities. At the same time, libraries and interfaces that are particularly critical to ATM operations are protected.
The same principle applies to hardware: components such as dispensers, PIN pads, readers and cash modules can be classified and monitored, making it possible to identify unauthorised disconnections, replacements or modifications.
The result is deeper control, helping banks identify potential anomalies earlier and reduce areas of risk.
Greater control over access without increasing management complexity
Another key area is access management. The evolution of Lookwise Device Manager introduces more advanced tools for precisely defining who can do what, strengthening authentication, roles, permissions and segregation of duties. These capabilities include Active Directory integration, multi-factor authentication and session control.
This enables banks to apply stricter security policies without sacrificing centralised management, which is particularly important when networks include large numbers of devices, locations or different service providers.
Bringing security and operations closer together
Effectively managing an ATM network requires more than simply knowing whether a terminal is online or whether a service is available. It is increasingly important to correlate operational information with security data.
This is why the integration between Lookwise Device Manager and WWS is particularly significant. It brings together operational visibility of the ATM network and security-related information, making it easier to analyse service availability, anomalies and cyber events together.
For banks, this means having a more complete view of what is happening across the network and more information to quickly identify the nature of an anomaly and take more targeted action.
LDM can also connect with the bank’s wider technology ecosystem through APIs and integrations with SIEM and SOC platforms, centralising information relating to security, inventory, alerts, audits and activities.
Managing large ATM networks more simply and automatically
As the number of terminals grows, even seemingly simple activities can become demanding when they have to be performed manually on each individual device.
LDM’s remote management capabilities are therefore evolving towards greater automation and orchestration. Operations can be organised, prioritised and carried out either on individual terminals or across multiple devices, with full traceability and auditing of the activities performed.
Operational continuity even across the most complex infrastructures
The evolution of Lookwise Device Manager also addresses resilience and scalability. The platform is designed to operate in high-availability environments, with redundancy, failover capabilities and the option to distribute infrastructure across multiple data centres.
It can also be deployed in on-premises, hybrid or cloud-ready environments.
This flexibility makes it possible to apply the same security model to large and complex networks while maintaining operational continuity and centralised control.
Security as a response to evolving regulations
Strengthening ATM cybersecurity also forms part of an increasingly complex regulatory landscape. In addition to requirements already associated with standards such as PCI-DSS and NERC, LDM now also supports cybersecurity requirements related to DORA, CRA and NIS2, as well as banks’ internal policies.
For banks, this means being able to integrate ATM network protection into a broader security and compliance strategy that is aligned with the new responsibilities facing the financial sector.
A more secure ATM also means a more reliable service
The evolution of Lookwise Device Manager therefore marks a shift from protecting individual endpoints to a broader security model that takes the entire ATM operational lifecycle into account.
For financial institutions, this means greater visibility, more control, simpler management of security activities and an enhanced ability to respond to anomalies. For end customers, the indirect benefit is a more secure, resilient and reliable ATM service.
With Lookwise Device Manager, Auriga is bringing cybersecurity closer to the day-to-day operation of ATM networks, transforming it from a collection of technical controls into an integral part of the management and continuity of banking services.
